www.spi-inc.org uses an invalid security certificate

Jimmy Kaplowitz jimmy at spi-inc.org
Thu Feb 27 23:52:34 UTC 2014


On Thu, Feb 27, 2014 at 11:46:32PM +0000, TJ wrote:
> Most sites and browsers support SNI in which case multiple IPs aren't
> required, although to handle those user agents that don't support SNI it is
> usual to make the server's default site be the primary HTTPS site for the
> organisation.
> 
> Instead of several additional ALT Subject Names just use the wildcard
> "*.spi-inc.org" in addition to a CN of "spi-inc.org".

I've brought this thread to our sysadmins' attention. Thanks for mentioning it.

- Jimmy Kaplowitz
jimmy at spi-inc.org


More information about the Spi-general mailing list